Comment by heaney-555

I think it's worse than that. I think whoever did this genuinely thought that a "256-bit security key" meant a random number between 1 and 256.